Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/613d8516ab2d0c175b588835cd57a18994722944.roa
File:                     613d8516ab2d0c175b588835cd57a18994722944.roa (raw, json)
Hash identifier:          YUg9LqIJVkvpR9vhNWMmAec48OxMxYDHE3mF995hFU0=
Subject key identifier:   B8:33:CE:A8:18:BD:FE:CA:12:3C:43:95:59:E2:C5:D9:7E:D2:CB:CB
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0EB87E
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/613d8516ab2d0c175b588835cd57a18994722944.roa
Signing time:             Fri 21 Oct 2022 04:29:41 +0000
ROA not before:           Thu 20 Oct 2022 03:00:00 +0000
ROA not after:            Sat 21 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964734 (0xeb87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 20 03:00:00 2022 GMT
            Not After : Oct 21 03:00:00 2023 GMT
        Subject: CN=613d8516ab2d0c175b588835cd57a18994722944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:35:a5:74:50:56:a9:1b:e1:74:44:00:9c:76:
                    ac:51:fc:b0:e7:8e:a6:73:ec:58:fe:c4:30:58:2b:
                    6b:58:3a:30:8c:7b:20:32:52:7c:0c:3f:97:7a:e1:
                    e5:b4:14:84:3b:bb:d7:4e:1e:cf:2b:90:3f:ca:16:
                    1a:70:61:5e:37:d7:bf:e3:c1:0a:f6:fa:2f:cd:6c:
                    ed:2c:0f:4c:2f:3f:49:f9:2d:e2:8c:3f:65:9c:27:
                    14:59:dd:91:b7:e2:a8:ac:08:c6:1e:b5:0e:d9:50:
                    79:14:ad:df:4f:4e:1b:ce:90:ce:45:a4:d9:81:f7:
                    85:bc:7e:ca:1c:a4:4a:ea:45:48:cf:1c:43:e9:d1:
                    24:3d:45:fe:92:39:8b:38:96:cd:1b:14:55:b9:f5:
                    46:0f:11:36:a1:e3:bd:49:55:65:c5:32:5e:10:47:
                    9d:b9:2d:e1:6f:69:61:c7:3f:25:fb:d8:40:7f:26:
                    a7:10:bd:80:a0:ac:64:e7:d7:e2:84:f4:cb:d4:8c:
                    e5:ed:f6:81:04:77:db:ed:70:9d:0f:c9:b6:df:c0:
                    f7:3f:ff:2b:4c:61:2e:de:e3:03:0a:d9:52:0c:20:
                    d4:9d:fc:b4:d8:53:48:68:7e:46:df:f4:1c:4d:8f:
                    07:1f:c9:a3:e6:f1:d2:b7:29:65:ee:7e:1f:75:fc:
                    0f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:33:CE:A8:18:BD:FE:CA:12:3C:43:95:59:E2:C5:D9:7E:D2:CB:CB
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/613d8516ab2d0c175b588835cd57a18994722944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:a2:a7:37:29:2a:3a:7c:e6:4d:0a:d1:b8:e4:c9:9d:f2:24:
         ae:5c:10:ee:f5:e4:f8:06:0e:a7:34:e9:3e:f7:ff:e5:71:f2:
         a1:d0:98:19:55:39:dc:ae:7a:1e:3b:b6:0d:6c:02:8b:dc:70:
         79:46:82:3d:31:37:c5:d7:f4:b3:0c:ab:82:8a:99:bc:57:6d:
         76:35:b3:33:3d:c2:fc:69:99:15:95:b6:91:02:ea:d4:f5:20:
         60:93:7d:d2:f7:c4:a9:b1:61:c7:69:ea:67:f1:89:56:2f:42:
         c4:95:0f:8a:4a:73:ea:e2:ef:cc:a5:a5:71:bb:6f:e5:60:4f:
         c5:f0:be:77:31:83:88:01:38:72:14:94:80:69:b5:48:20:04:
         be:f9:2a:bc:d5:29:66:d2:7e:57:c3:37:04:43:3b:19:b2:f2:
         35:e1:3f:e5:9c:46:82:65:3d:18:1e:06:0f:ee:4e:90:7b:56:
         14:ee:9d:c8:43:af:0e:e5:e4:c4:8c:06:00:28:69:a8:03:d5:
         d3:a1:d0:49:c0:84:63:11:a7:62:b3:66:f2:fb:eb:b6:db:c3:
         76:fd:d3:d7:db:87:83:e4:24:fb:e0:b8:04:ce:0c:aa:6a:7d:
         a1:8b:76:20:bd:e3:2f:4f:e0:ab:36:79:f9:93:bb:37:8c:21:
         51:47:99:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----